This tutorial explains how to catch a dangerous agent skill before an agent ever runs it: review it automatically, block it in CI if it fails, and only let your agent load skills that passed. Agent skills make AI workflows easier to reuse, share, and improve. A skill is a single, reviewable file with its own declared tool permissions.